On: Docker Hub Hacked – 190k accounts, GitHub tokens r...

[gigatexal]

Does this lessen the relevance that docker has these days?

[viraptor → gigatexal]

Did Docker become any less useful for you due to this, or provides less value? Unlikely.

[gigatexal → viraptor]

I’m thinking twice about using docker hub.

And the main usecase is k8s. So docker is just an implementation detail its relevancy is waning imo

[friedrichg → gigatexal]

Docker hub is a centralized service. What we are seeing is the result of having a huge centralized service: if it gets compromised, then many dependencies are compromised.

Some organizations took the risk of running docker taking images directly from docker hub. They were relaying the security of the images to them.

Some organizations are going to panic now and host their own registry. Which they need to protect as well. But in general it will create a better decentralized ecosystem.

I think this is good for the docker community in general.

[gigatexal → friedrichg]

We run our own registry that just mirrors images that we want to use and keeps them up to date. It’s not a silver bullet but it works.

[turtlebait → gigatexal]

I'd worry about mirroring the images because of cases like this, you'd want some sort of triage process before it gets into your environment.